Privacy Policy

Last updated: June 5, 2026

What we collect

We collect only what we need to run the service:

  • Account info: Email address when you sign up
  • Resume content: Text extracted from your uploaded resume, used only to generate your letter
  • Job descriptions: Text you paste in, used only to generate your letter
  • Generated letters: Saved to your account so you can access them later
  • Payment info: Handled entirely by Stripe — we never see or store your card number
  • Usage data: How many letters you've generated (for plan limits)
  • Referral source: If you arrive via an affiliate link, we record which affiliate referred you so they can receive a commission if you subscribe. This is stored as a short code — not your name or any personal identifier.

How we use your data

  • To generate your cover letters using the Claude AI API (Anthropic)
  • To manage your account and subscription
  • To send you transactional emails (magic login links, receipts)
  • To enforce plan limits (letter counts)

We do not sell your data. We do not use your resume or letters to train AI models.

Third-party services

SupabaseDatabase and authentication
Anthropic (Claude API)AI letter generation — your resume and job description are sent to their API to generate the letter
StripePayment processing — we never see your card details
VercelHosting and infrastructure
ResendTransactional email delivery

Data retention

Your account data and generated letters are stored as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. Resume text is not stored beyond what's needed to generate your letter — it is not persisted after generation.

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all data
  • Export your data in a portable format

To exercise any of these rights, email support@letterreal.ca.

Cookies

We set the following cookies. We do not use advertising cookies or behavioural tracking.

Authentication session sb-* (Supabase)

Keeps you logged in. Essential — the site cannot function without it.

Duration: Session / up to 1 year

Shared with: Supabase (our database provider)

Referral tracking letterreal_ref

Set when you arrive via an affiliate link. Stores the affiliate's referral code — a short alphanumeric string with no personal data — so the affiliate receives a commission if you subscribe. If you have never visited via an affiliate link, this cookie is never set.

Duration: 30 days

Shared with: Only us. The affiliate is told a conversion occurred and the commission amount. They are not told who you are.

Consent decision lr_consent + localStorage

Stores whether you accepted or declined cookie tracking. Only set for visitors in Canada.

Duration: 1 year

Shared with: Nobody — stored locally in your browser only.

Visitors in Canada are shown a consent banner before any referral cookie is set. Declining prevents the referral cookie from being set — all features of the site remain available. You can withdraw consent at any time by clearing your cookies and localStorage for this site.

Contact

Privacy questions: support@letterreal.ca